Progress update from the Librem 5 hardware department

Re:Progress update from the Librem 5 hardware department by madez on Wednesday September 05, 2018 @01:49AM (#17915322)

Nor Google nor Apple can – to the best of my knowledge – decide what code is run or not run on my PC. That is evidently a plus point for security, if one doesn't blindly trusts these companies.

[ Parent | on HN ]

Re:Progress update from the Librem 5 hardware department by pjmlp on Wednesday September 05, 2018 @03:42AM (#17915851)

Thing is, I doubt very much you ensure that your $HOME is safe when that code is run.

And as proven by the set of Linux Security Summit 2018 talks, there is still lots of work to be done regarding security on Linux distributions.

[ Parent | on HN ]

Re:Progress update from the Librem 5 hardware department by madez on Wednesday September 05, 2018 @10:14AM (#17918135)

Well, I sandbox closed source apps by running them as a different user that doesn't have access to my $HOME.

[ Parent | on HN ]

Re:Progress update from the Librem 5 hardware department by pjmlp on Wednesday September 05, 2018 @10:33AM (#17918306)

That isn't enough to protect from kernel bugs, as discussed at Linux Security Summit, hence kernel self protection project and related initiatives, mostly driven by Google regarding Android security.

If you use Qubes OS then it is another matter.

[ Parent | on HN ]

Re:Progress update from the Librem 5 hardware department by madez on Saturday September 08, 2018 @02:34PM (#17942105)

You are being unreasonable because you equate the hypothetic possibility of malicious code execution by Apple or Google due to bugs with running an OS from either on hardware from them.

[ Parent | on HN ]