Quote from: hubris on March 10, 2024, 17:42:33@A:
I'd like to hear your thoughts on:
1. Sandboxing - This is a given on any platform. If you run something as a certain user, you expect to have access to all files of that user. Unless you want to deal with the inconvenience of not being able to open files you need.
If you want to have your stuff limited, than I suggest using Flatpak and Flatseal(not mentioned in the article) where you can micromanage application permissions
Otherwise, giving access to all files by default is a user convenience feature even if it isn't the most secure.
The difference is, when running open source software. What it does is visible in the source code. With closed source, you have 0 clue what it is doing
There are also locked down Linux where everything is run in its own VM like QubesOS for those paranoid
2. This one is fairly weird one, saying how other operating systems have gone further with memory safe languages like Rust. What is he basing this on? I ask this as someone who programs in Rust myself.
I guess since he sees the source code of Linux he can say, oh look how little Rust there is. But since he can't see the source code of others and they advise going forward to use memory safe languages, he makes blind assumptions
There has been an ongoing effort to port much of linux tools to rust.
Then he goes to say that Linux doesn't have virtualization, which is wrong. KVM is a thing.
3. eBPF has been disabled by default. Just because a feature exists in the kernel for those who need it doesn't mean everyone has to use it.
And he admits its an issue effecting all platforms. It goes without saying that things will interact with the kernel.
4. Well yes, root is root. Obviously if you have administrative privileges you, you can do anything.
The X11 issue is a problem due to X11 being old, but Wayland fixes that problem. And many are already making Wayland the default. Or again you can do QubesOS
A move to immutable is also removing more and more need for root access for stuff to begin with
But again, at end of the day. Access to source code is the biggest defense. Because when code is closed source, nobody know what it is doing behind the scenes. Where as for open source, all the code is visible for 3rd party auditing