News for hackers. Stuff that matters.
Re:Ask HN: How do you trust that your personal machine is no... by highwaylights on Sunday January 15, 2023 @01:37PM (#34391772)
> MacOS, iOS, and Windows are proprietary so they are dramatically worse off than Linux in security out of the gate. No one should use these that desires to maximize freedom, security and privacy.

Not sure how fair this is, even though I agree with you with regards to Linux being auditable and the others not.

Windows and macOS these days have vendor-provided code signing authorities that can be leveraged (and are by default), which provides at least some protection against malware at the macro level (in that the certificates can be revoked if something nefarious is identified). This doesn't exist at all in Linux, although third party products are in the early stages.

Windows 11 and macOS have hardware-backed root-of-trust. In Windows the root of trust is the TPM, on macOS it's the T2 (Intel) or the chip package (ARM).

Any of these features could be compromised without your knowing, but at least where you have control authorities for these systems you can draw some comfort in knowing that once new malware has been identified spreading on pretty much any machine, it can be stopped quite rapidly on all machines by revocation until the bug can be patched.

Re:Ask HN: How do you trust that your personal machine is no... by PaulDavisThe1st on Sunday January 15, 2023 @07:09PM (#34395118)
> Windows and macOS these days have vendor-provided code signing authorities that can be leveraged (and are by default), which provides at least some protection against malware at the macro level

The code-signing is relatively trivial to workaround, you just have to get users to run xattr(1) to remove quarantine status.

Re:Ask HN: How do you trust that your personal machine is no... by highwaylights on Monday January 16, 2023 @03:42AM (#34398385)
But, you would need to get users to do that?
Re:Ask HN: How do you trust that your personal machine is no... by raxxorraxor on Monday January 16, 2023 @02:55AM (#34398061)
I have yet to see this giving security in practice anywhere. I think this is primarily a lock-in mechanism.