Re:The Google plasma globe affair of 2012
by godelski on Wednesday October 12, 2022 @04:28PM
(#33182633)
> That just leaves most users unprotected.
Aren't these users already unprotected? I don't think this is a security concern for most people and turning on by default would frustrate them more. It'd be like shipping Firefox or Chrome with NoScript on my default. Sure, more protection, but it would turn away more people than it would pull in. Better as optional.
Re:The Google plasma globe affair of 2012
by pabs3 on Thursday October 13, 2022 @01:46AM
(#33187672)
Firefox is ratcheting up the tracking protection for normal users and GNOME enabled Thunderbolt protection by default, so there is definitely precedent for protecting regular users too. Also with the rise of stalkerware, normal users are definitely targets too. I think the interface I proposed would be reasonable enough for most people and you could make it easy to turn off with the right UX.
That just leaves most users unprotected.
> I was suggesting that they come pre-installed
GNOME's support for USBGuard is installed by default, but USBGuard itself may not be depending on the distro. Agreed that it and other security/safety/robustness (for eg SMART disk warnings need to be supported) stuff (should be enabled by default. GNOME should use Flatpak-style sandboxing for natively installed apps too.