Re:Linux Certificate Authority root stores have a too simple...
by _jal on Tuesday December 06, 2022 @09:39AM
(#33880596)
I think that claim is overblown, but, basically, Canonical weighs security decisions differently than some people would like (me included).
The main comparison is Debian, for obvious reasons. Debian tends to be a bit faster at applying upstream security patches.
Another example is usually binned as "privacy", but has security implications - and that's the bullshit they played with leaking your search requests to Amazon and calling it a convenience, putting ads in the motd, stuff like that.
Again, my personal view is this is less a problem than some other folks. I wish they were faster, and I think their side-hustles in advertising and such are tacky and gross. But I don't see that problem as bad enough to ditch them, or even yell to loudly.
The main comparison is Debian, for obvious reasons. Debian tends to be a bit faster at applying upstream security patches.
Another example is usually binned as "privacy", but has security implications - and that's the bullshit they played with leaking your search requests to Amazon and calling it a convenience, putting ads in the motd, stuff like that.
Again, my personal view is this is less a problem than some other folks. I wish they were faster, and I think their side-hustles in advertising and such are tacky and gross. But I don't see that problem as bad enough to ditch them, or even yell to loudly.