3 ms·
We need better OSes such that signing of software is not required to keep your computer safe.
by iamniels 6mo ago
We need better OSes such that signing of software is not required to keep your computer safe.
- drewfax 6mo agoGrapheneOS is doing lot of things right in this regard. Robust permission system adopted from AOSP and hardening by default in every imaginable way. Things like hardened malloc, storage scopes are excellent security features. Malware cannot do much even with the default settings.
- fsflover 6mo agoQubes OS is such OS: it runs everything in VMs with strong hardware isolation. My daily driver, can't recommend it enough.
- layer8 6mo agoWith a file system driver like Veracrypt, if it’s malicious, the OS might keep your computer safe, but not your files that you store in that file system.
- nixpulvis 6mo agoYes, I completely agree.
- account42 6mo agoWe need to stop trying to solve computer security entirely through technical means. We don't do that for any other kind of crime.