• 0 Posts
  • 10 Comments
Joined 1 year ago
cake
Cake day: July 29th, 2025

help-circle


  • Fedora’s choice to have ptrace_scope 0 sure is strange, it seems they had a discussion about it to revert it back to the upstream default of 1.

    SEL being important was actually the main reason why in the light of recent kernel vulnerabilities I switched back to openSUSE, after being on Void for a while as inspired by this guide.

    That the AUR is insecure lays basically in its name, I really don’t get why people would use for anything but the most niche packages.

    What Android is doing well compared to Linux is that it has proper per application compartmentalization, whereas *nix systems would require each program to be run by a different user to separate them, though Linux is also improving in that regard, for example through SEL or the flatpak sandbox.



  • I mean it’s commendable that Apple makes an effort to keep their users secure from third-party attackers (besides MDM software), but there’s just no telling how much control and privacy violation is going on when they’re keeping their source code secret. (“What do they have to hide? Clearly something.”)

    SecureBlue seems interesting, though most of their features look like security theater compared to the default