Linux Hardening Guide
I think everyone with valid criticisms of this should file an Github issue, I'm definitely planning to, because of these things:<p>- Lots of discussion on X11 security issues without any mention of wayland<p>- Not on the Linux page, but they recommend iOS as a secure OS, which is total bullshit given how many failures we've seen with serious bugs/vulns put into production. I can't even remember how many times I've read about bugs in Safari, Whatsapp or some other app that can be chained to get kernel-level privileges. Remember the Jeff Bezos hack?<p>- No discussion of threat models<p>- Focusing on academic/technical arguments and not looking at real-world malware ecosystems/exploits (or: why there is orders of magnitude more malware for Windows than Linux)<p>- Memory safe languages - Linux is totally exploring a way to use rust for parts of the kernel, and Windows is still probably 99% C/C++<p>I'm all the more confused by this guy since he's a whonix developer, this almost sounds like a Microsoft employee based on how little scrutiny he applies to Windows...<p><a href="https://github.com/madaidans-insecurities/madaidans-insecurities.github.io/issues" rel="nofollow">https://github.com/madaidans-insecurities/madaidans-insecuri...</a>