• 0 Posts
  • 28 Comments
Joined 3 years ago
cake
Cake day: March 28th, 2023

help-circle



  • Then I have no idea what you’re referring to by ‘what google is doing to android and tried to do to web’ because as far as I know, that isn’t relevant.

    What I’m describing is definitively not antivirus. Antiviruses use heuristics (and known checksums of bad things) to scan processes/files/network traffic/system calls for dangerous patterns. They’re not doing real-time checksuming to detect system corruption or malfunction, they’re not comparing known system files because that’s complex and hard to do, and seems to be what the company is claiming here.

    I have no idea what Google checksuming you’re referring to but as far as I’m aware that’s a not thing they’re doing to android and trying to do web. Everything Linux (including Android) does some amount of checksums at certain points because they’re useful, but not real-time process checksums. I assumed you were surely referring to them requiring that apps get signed by their certificates, making everything subject to their approval. Which is different from realtime checksumming for integrity.


  • I don’t think this is accurate. What Google is doing is making the whole ecosystem depend on Google’s approval to be allowed to work.

    In this case, they seem to be claiming they’re just doing real-time checking of processes as they run (presumably stuff like checksuming loaded libraries, looking for memory overruns, etc.), and so detecting certain signs of malware or system corruption.

    To be honest, based on the announcement it sounds completely unnecessary, but I don’t think they’re at all doing what Google is doing.


  • These are very subjective arguments, and even the objective points are completely subjective depending on your distro.

    I mean one of his arguments is that C++ is just inherently insecure. He just takes Microsoft’s claims at face-value that all their pointless shit is the magical security wall that it claims to be. He buys into the same lie that ACE on a Windows, Mac or Android is somehow much much safer than on Linux. Most of his claims that other OSes are more secure are rooted in “well yeah they do exactly the same but at least they knooow they do”.

    I’m not even acknowledging ChromeOS - it is Linux, except it only runs a browser.

    99% of this stuff also applies to Windows/MacOS/Android/iOS, except moreso and far more universally. And 90% of this stuff is only relevant if you’re being targeted by some state-funded intelligence like the CIA (cold reading your RAM?? minimum 16-character password?? Keystroke fingerprinting???)

    So whatever, I think the hardening guide looks fairly accurate, but unless you’re being spied on by world powers, I wouldn’t consider it worth peoples’ time to read, never mind implement. 90% of people are still going to be more secure by cluelessly using Linux instead of cluelessly using the others.



  • To be fair, a ‘strong’ password isn’t likely to help all that much.

    Those compromised account lists are almost exclusively from websites that were hacked to harvest passwords, or didn’t hash their passwords sufficiently in the first place.

    Making a strong password is obviously ideal. But people are generally better off with some basic in-browser password management - avoid password reuse is the real big deal. Maybe diceware is the thing to use if there’s a specific password you need to actually remember and re-type across devices




  • A car for more than like 5k. A terrifying stat is that 90% of people in my country buy their car for on finance for >10k, yet you can buy a reasonable used one for no more than 5k anywhere

    There are niche circumstances where a pricey car could be worthwhile, lots of long haul journeys, need for fuel efficiency, etc, but 90% of people don’t need or benefit much from that.

    I bought my current one for 1k just last year. It’s 20 years old, but it’s in perfect condition and the efficiency is not that much different from modern cars, certainly not enough to be nearly worth the extra money.