fsflover

22 ms·

631.
by fsflover 7mo ago
Qubes OS is such OS: it runs everything in VMs with strong hardware isolation. My daily driver, can't recommend it enough.
632.
by fsflover 7mo ago
> and “all” of the vulnerabilities are out of it too This is a good point; however the isolating code should be much smaller and easier to verify.
633.
by fsflover 7mo ago
The one not described as "security through obscurity".
634.
by fsflover 7mo ago
The problem with this is, you spend a lot of effort for low benefit. You should spend it on actual security instead.
635.
by fsflover 7mo ago
> I think AGPL would make it less useful for the honest people I don't understand what you mean here. AGPLv3 guarantees the four essential freedoms to all users. It only restricts developers from removing users' rights, like th
636.
by fsflover 7mo ago
Some links for the downvoters: https://news.ycombinator.com/item?id=46911901 https://news.ycombinator.com/item?id=47457963
637.
by fsflover 7mo ago
> If its actually this good, and Apple and Google apply it to their mobile OS codebases, it could wipe out the commercial spyware industry If Apple and Google actually cared about security of their users, they would remove a ton of obvio
638.
by fsflover 7mo ago
This is only true if your approach is security through correctness. This never works in practice. Try security through compartmentalization. Qubes OS provides it reasonably well.
639.
by fsflover 7mo ago
Every piece of software definitely has serious vulnerabilities, perfection is not achievable. Fortunately we have another approach to security: security through compartmentalization. See: https://qubes-os.org
640.
by fsflover 7mo ago
> there's stuff I would have open sourced in the past but no longer will because I know it would get trained on Could you publish under AGPLv3, so any AI users with recognizable patterns from your code can get in trouble?
641.
by fsflover 7mo ago
> At some point, you have to cut off previous technologies because virtually everyone's moved to something better. What if I do own a smartphone, but it runs neither Android nor iOS, it runs GNU/Linux? Do you consider that a pr
642.
by fsflover 7mo ago
Do you have any reason to think this? Why would Google refuse to earn more money?
643.
by fsflover 7mo ago
Any articles highlighting the great value?
644.
by fsflover 7mo ago
Attestation of what? It's none of your business how I secure and configure my phone. I use a smart card on my Librem 5 btw. See also: https://news.ycombinator.com/item?id=47647047
645.
by fsflover 7mo ago
Search for "Google" in my favorite submissions on HN.
646.
by fsflover 7mo ago
> I try to degoogle as much as possible > Sent from my pixel phone This contradiction is not even funny. Sent from my Librem 5.
647.
by fsflover 7mo ago
Refusing to send all your private data to the US to benefit their megacorps, using the tax payers' money, is not "perfection". It is the only reasonable and legal choice.
648.
by fsflover 7mo ago
> If I am an app developer how does it tell me that your OS has not been tempered with or actually that my app has not been tempered with? This is not your business to verify and control what can run on my phone. I can do it with my smar
649.
by fsflover 7mo ago
So please tell us what the difference is.
650.
by fsflover 7mo ago
> in all seriousness what examples could you give me here in terms of device hardware attestation? My Librem 5 runs an FSF-endorsed OS and has a smartcard. > True for Google, not true for Apple. Device attestation on iOS does not requ
651.
by fsflover 7mo ago
It's just a matter of creating a web app.
652.
by fsflover 7mo ago
And force them into the Google surveillance, https://news.ycombinator.com/item?id=26639261
653.
by fsflover 7mo ago
This is security nihilism, https://news.ycombinator.com/item?id=27897975
654.
by fsflover 7mo ago
https://news.ycombinator.com/item?id=47618324
655.
by fsflover 7mo ago
For the most agency over my system I prefer Qubes OS. I use Debian and Fedora inside VMs. Their mnimized versions are available from the Qubes repositories.
656.
by fsflover 7mo ago
Perhaps a better legal framework for privacy (GDPR)?
657.
by fsflover 7mo ago
> I now run personal and professional browser profiles from two different jails / cgroups. It's a pain in the arse to set up, and I have to verify my config still works after every update You may be interested in Qubes OS. My d
658.
by fsflover 7mo ago
Lite doesn't actually protect you.
659.
by fsflover 7mo ago
Debian, if you need a rock-stable system; Fedora for cutting edge.
660.
by fsflover 7mo ago
You should add "Show HN:" to the title to indicate its your project.

More ›