5 ms·

Can’t believe people have not pointed out the biggest reason of them all. Its the most widely deployed desktop os across rich targets (corporations). A lot of t

Can’t believe people have not pointed out the biggest reason of them all. Its the most widely deployed desktop os across rich targets (corporations). A lot of time and investment goes into cracking it.

Jerrrrrrry 2y ago
[flagged]
- throwaway48476 2y ago
  For a while apple had better security. Now it's more even, if you go by the 0day prices. There's not a lot of truly secure options unless you wanted to develop your own phone from the ground up.
  - beng-nl 2y ago
    How about iPhone in lockdown mode?
    - Jerrrrrrry 2y ago
      [flagged]
  - edm0nd 2y ago
    GrapheneOS has been doing a lot of great work in the secure mobile OS space.
    - Jerrrrrrry 2y ago
      Yeah its a chilling effect where anything useful enough to get popular gets assumed to be compromised. It seems unfalsifiable but it's also not unlikely.
- cruffle_duffle 2y ago
  Wait until all those regulations requiring apple to allow different app stores come online and then we will see how secure iOS is. The day Joe Clicks-A-Lot can follow a link in some random pig butchering scam email then “legally” sideload and run whatever crazy weird goop happens to be at other end will really put things to the test. Because letting Susie Easy-To-Phish install anything and everything on her iPhone is going to make things very… interesting. That being said, Joe and Susie can already do that on android right?
  - Jerrrrrrry 2y ago
    [flagged]
ddtaylor 2y ago
There are more computers running Linux on this earth by orders of magnitude.
- gjsman-1000 2y ago
  > There are more computers running Linux on this earth by orders of magnitude. Yes, but most of them aren't running GNU and have signed boot with no ability to disable it. Very shallow victory. Could turn into FreeBSD tomorrow, and very little ground would be lost.
  - anthk 2y ago
    You forgot servers.
    - saagarjha 2y ago
      That’s what they’re talking about?
- kryogen1c 2y ago
  >> Its the most widely deployed desktop os across rich targets >There are more computers running Linux You did not address the claim you replied to. Users get compromised, and users use windows desktop. The number of DB clusters or whatever running *nix isn't relevant.
  - alemanek 2y ago
    Users use Android phones which make use of a Linux kernel. There are far more Android phones then there are windows desktops. Also a phone often has far more sensitive data and is also privy to 2FA codes. https://source.android.com/docs/core/architecture/kernel https://source.android.com/docs/core/architecture/kernel
- jeroenhd 2y ago
  And almost none of those bother doing things like checking driver signatures at all. You don't need to figure out hacks like "downgrading the OS to bypass signature validation logic" when you can `insmod` the moment you get admin/root permissions. You could configure all manner of security settings on Linux, of course, but on most Linux distros they're all left unconfigured.

Jerrrrrrry 2y ago

[flagged]

throwaway48476 2y ago
For a while apple had better security. Now it's more even, if you go by the 0day prices. There's not a lot of truly secure options unless you wanted to develop your own phone from the ground up.
- beng-nl 2y ago
  How about iPhone in lockdown mode?
  - Jerrrrrrry 2y ago
    [flagged]
- edm0nd 2y ago
  GrapheneOS has been doing a lot of great work in the secure mobile OS space.
  - Jerrrrrrry 2y ago
    Yeah its a chilling effect where anything useful enough to get popular gets assumed to be compromised. It seems unfalsifiable but it's also not unlikely.
cruffle_duffle 2y ago
Wait until all those regulations requiring apple to allow different app stores come online and then we will see how secure iOS is. The day Joe Clicks-A-Lot can follow a link in some random pig butchering scam email then “legally” sideload and run whatever crazy weird goop happens to be at other end will really put things to the test. Because letting Susie Easy-To-Phish install anything and everything on her iPhone is going to make things very… interesting. That being said, Joe and Susie can already do that on android right?
- Jerrrrrrry 2y ago
  [flagged]

ddtaylor 2y ago

There are more computers running Linux on this earth by orders of magnitude.

gjsman-1000 2y ago
> There are more computers running Linux on this earth by orders of magnitude. Yes, but most of them aren't running GNU and have signed boot with no ability to disable it. Very shallow victory. Could turn into FreeBSD tomorrow, and very little ground would be lost.
- anthk 2y ago
  You forgot servers.
  - saagarjha 2y ago
    That’s what they’re talking about?
kryogen1c 2y ago
>> Its the most widely deployed desktop os across rich targets >There are more computers running Linux You did not address the claim you replied to. Users get compromised, and users use windows desktop. The number of DB clusters or whatever running *nix isn't relevant.
- alemanek 2y ago
  Users use Android phones which make use of a Linux kernel. There are far more Android phones then there are windows desktops. Also a phone often has far more sensitive data and is also privy to 2FA codes. https://source.android.com/docs/core/architecture/kernel https://source.android.com/docs/core/architecture/kernel
jeroenhd 2y ago
And almost none of those bother doing things like checking driver signatures at all. You don't need to figure out hacks like "downgrading the OS to bypass signature validation logic" when you can `insmod` the moment you get admin/root permissions. You could configure all manner of security settings on Linux, of course, but on most Linux distros they're all left unconfigured.