Re:The Framework Laptop Chromebook Edition
by cmatthias on Thursday September 22, 2022 @02:44PM
(#32942963)
What if the attacker is the one who built and shipped the OS to begin with? Everything you say is true, but it doesn't matter as long as user data (history, location, etc) is being shipped off to Google.
Or, put another way: your threat model is a nefarious hacker or three-letter-agency who might secretly modify your hardware/software to get your data. Mine is surveillance capitalism. ChromeOS is secure under your threat model, but is _built by the attacker_ under mine.
Both of these threat models are important to consider, but one is much more relevant to a larger portion of the population than the other.
Re:The Framework Laptop Chromebook Edition
by cmatthias on Friday September 23, 2022 @10:47PM
(#32959330)
I said it was more relevant than nefarious hackers or government agencies, not relevant in some subjective general sense. So whether or not they care is irrelevant to my point.
Or, put another way: your threat model is a nefarious hacker or three-letter-agency who might secretly modify your hardware/software to get your data. Mine is surveillance capitalism. ChromeOS is secure under your threat model, but is _built by the attacker_ under mine.
Both of these threat models are important to consider, but one is much more relevant to a larger portion of the population than the other.