07-25-2020, 04:53 PM
Quote:
26 minutes ago, elshara said:
Linux is a very hands on OS. Windows just hides stuff. Everything is going to share data remotely at some point, it is inevitable. Not everyone may know how to protect themselves on platforms they don't know how to operate. It'd be really cool to see someone come up with a Distro that put everything Windows was known for into a Linux kernel and made a GUI for security centre that did its job, on the network and hardware level. Ultimately, tracking ties back to location. Who cares who sends what, so long as all your personal info is viewed offline and perhaps even on a USB thumb drive viewed on Linux. That's probably the best way to keep your most secure stuff shown to as few people as possible, while keeping it stored on you or where only you can get to it best. I like to use Tor when doing research, just in case of any browser problems and use different browsers for different tasks on different computers to divide things up.
That's not how Cyber Security works: it's not just the OS, but people. Windows is KNOWN for spying, and hiding it, as well as encouraging 'cloud storage', 'access anywhere' ... The real important thing is educating people, and showing them alternatives that promote secure practices (not performing an action without root permissions, not implicitly trusting / clicking every link...).
It's in part due to GUI, and certain OSes (Mac, Windows...) wanting to HIDE everything from the user that makes such education and settings hard to work with. Plus, Windows' security is complete trash. There are still bugs in 10, that I can access with a piece of code that worked in Windows 7 and Vista.
There are kernel level exploits on Linux, such as 'Wasp Sting', and the infamous OpenSSL vulnerability 'HeartBleed' (a buffer overflow in the C Code that spilled cert signatures out in to random memory spaces...), they are rarer though, mostly due to the systems' permissions and the code being accessible to everyone to patch and review. If a Distro doesn't trust something, don't build / ship it.
Now, Linux DOES have a major problem, fragmentation. Multiple hundreds of distributions, and third-party attachments, as Linux is just a Kernel. A shame FreeBSD is sort of behind on hardware support: that system is all one piece, and undergoes full code audits I believe at least once a year.
I'll state this again for anyone checking this thread / posts out: cyber security is NOT about button clicks, companies, UIs, support. It is about user CARE and KNOWING what you are doing, making sure you understand and and reduce risks online, and sending data to as FEW PEOPLE AS POSSIBLE, regardless of what said data is!
