4 ms·

OTOH ChromeOS, one of the more secure operating system s (behind QubesOS, on par with Android and iOS) is GNU/Linux. But in normal Linux land things are moving

OTOH ChromeOS, one of the more secure operating system s (behind QubesOS, on par with Android and iOS) is GNU/Linux. But in normal Linux land things are moving too: Flatpack, Wayland, immutable rootfs, systemd service sandboxing, ... Also browsers on GNU/Linux are generally well sandboxed, the interfaces are there.

DEADMINCE 3y ago
> ChromeOS, one of the more secure operating system s (behind QubesOS, on par with Android and iOS) I don't know what features ChromeOS has over Linux but I wouldn't considered Android or iOS particularly secure, and Qubes isn't either directly, it's just a tool that can help in some cases.
- ricktdotorg 3y ago
  one nice thing about ChromeOS is that the system partition is literally read-only[1]. a staging partition is used to install updates. [1] https://www.chromium.org/chromium-os/chromiumos-design-docs/filesystem-autoupdate/ https://www.chromium.org/chromium-os/chromiumos-design-docs/...
  - pram 3y ago
    So is iOS/MacOS
0xbadcafebee 3y ago
Every browser on every platform gets 0days all the time, sandboxes don't stop them. ChromeOS is not one of the most secure OSes, it's not even the most secure Android OS. The Linux kernel's security design is crap. Doesn't matter what you run underneath it. It gets owned all the time, and it will stay that way.
- viraptor 3y ago
  You're really not adding good content here. This is crap, that gets owned all the time... Why? What's the actual comparison? What model/approach makes the difference? Please add something meaningful. Otherwise it's just ranting/fanboying over your preferences - we can be better than that on this board.
  - 0xbadcafebee 2y ago
    We really can't. Even if I reply with reasons, they will just be argued, ignored or downvoted by people who don't know what they're talking about. People only believe what they want to believe, or whatever a famous person says. (not to mention none of the people replying to me are providing any contrary evidence, just more spurious claims, but those with unpopular opinions get the downvotes)
- nolist_policy 3y ago
  Have you actually looked at the 0days? Almost always it's confined within the sandbox. You have to chain it with an sandbox breakout exploit to make it useful.

DEADMINCE 3y ago

> ChromeOS, one of the more secure operating system s (behind QubesOS, on par with Android and iOS) I don't know what features ChromeOS has over Linux but I wouldn't considered Android or iOS particularly secure, and Qubes isn't either directly, it's just a tool that can help in some cases.

ricktdotorg 3y ago
one nice thing about ChromeOS is that the system partition is literally read-only[1]. a staging partition is used to install updates. [1] https://www.chromium.org/chromium-os/chromiumos-design-docs/filesystem-autoupdate/ https://www.chromium.org/chromium-os/chromiumos-design-docs/...
- pram 3y ago
  So is iOS/MacOS

0xbadcafebee 3y ago

Every browser on every platform gets 0days all the time, sandboxes don't stop them. ChromeOS is not one of the most secure OSes, it's not even the most secure Android OS. The Linux kernel's security design is crap. Doesn't matter what you run underneath it. It gets owned all the time, and it will stay that way.

viraptor 3y ago
You're really not adding good content here. This is crap, that gets owned all the time... Why? What's the actual comparison? What model/approach makes the difference? Please add something meaningful. Otherwise it's just ranting/fanboying over your preferences - we can be better than that on this board.
- 0xbadcafebee 2y ago
  We really can't. Even if I reply with reasons, they will just be argued, ignored or downvoted by people who don't know what they're talking about. People only believe what they want to believe, or whatever a famous person says. (not to mention none of the people replying to me are providing any contrary evidence, just more spurious claims, but those with unpopular opinions get the downvotes)
nolist_policy 3y ago
Have you actually looked at the 0days? Almost always it's confined within the sandbox. You have to chain it with an sandbox breakout exploit to make it useful.